Application Security Engineer

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟢 Junior

💻 Application Engineer

🚫👨‍🎓 No degree required

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GuidePoint Security

WebsiteLinkedInAll Job Openings

201 - 500 employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

GuidePoint Security is a cybersecurity firm offering consulting, engineering, and managed services to help organizations secure their digital assets. The company specializes in application security, cloud security, data protection, email security, threat intelligence, and identity and access management. With solutions tailored to various platforms including AWS, Microsoft, Google Cloud, and OT environments, GuidePoint Security aims to enhance cybersecurity resilience for both enterprise and government clients. They focus on integrating advanced security technologies and providing expertise in risk assessment, compliance, and security awareness education, helping clients navigate complex cybersecurity challenges and improve their security posture.

📋 Description

• Support GuidePoint Security’s Application Security practice in the North Central region • Develop secure software development lifecycle programs • Integrate security into DevSecOps pipelines • Perform security assessments of AI-enabled and agentic applications • Run and tune SAST, DAST, SCA, secrets, and IaC scanning tools • Triage scan results, eliminate false positives, and provide prioritized remediation guidance • Design and implement security integrations across CI/CD pipelines, source control, IDEs, and ticketing systems • Configure policy gates and break-the-build criteria • Partner with development teams on remediation, secure coding, and developer enablement • Assess and harden software supply chain controls, including SBOMs, dependency and container image scanning, artifact signing, and pipeline/runner security • Perform threat modeling and security architecture reviews for cloud-native, microservice, container, and Infrastructure-as-Code environments • Leverage AI-assisted and agentic tooling to accelerate testing, triage, reporting, and remediation • Advise clients on secure adoption of AI coding assistants • Define AppSec metrics, vulnerability management SLAs, and maturity roadmaps aligned with OWASP SAMM, BSIMM, and NIST SSDF • Produce client-ready deliverables and present findings to technical and executive audiences • Contribute to AppSec practice growth through tooling, methodologies, and knowledge sharing • Provide service to clients, internal customers, and coworkers

🎯 Requirements

• 1–3+ years of experience in Application Security, DevSecOps, or software development with a security focus • Embraces emerging technologies, including AI tools • Hands-on experience with SAST, DAST, and SCA tools and integrating them into CI/CD pipelines such as Azure DevOps, GitHub Actions, GitLab CI, Jenkins, or Bamboo • Proficiency with Burp Suite Pro • Strong understanding of the OWASP Top 10 and OWASP API Security Top 10 and mitigation strategies • Strong working knowledge of secure development lifecycles • Experience guiding remediation of vulnerabilities identified by application security tools • Ability to review source code in one or more languages such as JavaScript/TypeScript, Python, Java, C#, Go, PHP, or C/C++ • Working knowledge of AWS, Azure, or GCP • Working knowledge of containers and Git-based development workflows • Strong written and verbal communication skills • Preferred: Experience with Invicti and/or Checkmarx; other platforms such as Snyk, Veracode, Black Duck, Semgrep, or GitHub Advanced Security • Preferred: Experience building agentic AI workflows or automation using Python, Bash, or PowerShell • Preferred: Experience with software supply chain security, SBOM, SLSA, Sigstore, IaC/container security scanning, threat modeling, and AppSec maturity frameworks • Preferred: Industry certifications such as GWAPT, OSWE, OSCP, CSSLP, CDP, or AWS Certified Security – Specialty • Preferred: Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent experience • Up to 10% travel • Sedentary work • Substantial movement of wrists, hands, and/or fingers for at least 8 hours daily • Close visual acuity for computer terminal viewing and/or extensive reading for at least 8 hours daily

🏖️ Benefits

• Remote workforce primarily (U.S. based only) • Some travel may be required for certain positions • Group Medical Insurance options: Zero Deductible PPO Plan with GuidePoint paying 90% of employee premiums and 70% of family premiums • High Deductible Health Plan with HSA with GuidePoint paying 100% of employee premiums and 75% of family premiums • HSA contributions: $850 annually per employee or $1,750 annually per family • Group Dental Insurance with GuidePoint paying 100% of employee premiums and 75% of family premiums • 12 corporate holidays • Flexible Time Off (FTO) program • Healthy mobile phone and home internet allowance • Eligibility for retirement plan after 2 months at open enrollment • Pet Benefit Option • Mentorship and guidance opportunities • Opportunity for career growth